chore(master): release 2.73.0

[github-actions]

🤖 I have created a release beep boop

2.73.0 (2026-07-20)

Features

• add generic OIDC SSO for admin login (71854d4)
• add group-based authorization for OIDC SSO (c988506)
• add OIDC_FORCED (SSO-only login) and OIDC_LOGOUT (RP-initiated logout) (1751ddb)
• make OIDC post-logout redirect optional (OIDC_POST_LOGOUT_REDIRECT_URI) (ae9169d)
• rebuild the open source license listing (ebe5e90)
• Tailwind v4 + FlyonUI admin UI theme (d648da1)
• theme: centralize the ACE editor fullscreen toggle (bf9a6db)
• theme: centralize the native datalist autocomplete builder (7b737b1)
• theme: convert auth and public layouts to Tailwind/FlyonUI (568de9e)
• theme: convert config core pages to Tailwind/FlyonUI (93f7c06)
• theme: convert Document Store pages to Tailwind/FlyonUI (5b2b687)
• theme: convert internals pages to Tailwind/FlyonUI (06a670e)
• theme: convert OAuth2 config pages to Tailwind/FlyonUI (a787584)
• theme: convert shared partials, replace bootstrap-autocomplete with datalists (eb3fdf1)
• theme: convert the accounts pages to FlyonUI (f54f5bc)
• theme: convert the admin shell to Tailwind v4 + FlyonUI (d9ab031)
• theme: convert the dashboard page to FlyonUI (c4a719c)
• theme: convert the gateways pages to FlyonUI (6b176fa)
• theme: convert the tokens and templates pages to FlyonUI (a650568)
• theme: convert webhooks pages to Tailwind/FlyonUI (77b4438)
• theme: follow the admin theme in the ACE editors (51bc909)
• theme: move the TLS certificate labels to FlyonUI tooltips (eabc578)
• theme: rebuild the public pages as framework-free HTML/CSS/JS (f3a34c0)
• theme: replace ClipboardJS with a central copy-to-clipboard handler (216334d)
• theme: restyle the stat cards to the FlyonUI dashboard idiom (e53dd27)
• theme: retire the Bootstrap legacy clusters and dead assets (836e36f)
• theme: retire the bootstrap-compat shim and jQuery (7669c5c)
• theme: sync the embedded message browser with the admin theme (858fbcd)
• theme: use HSTogglePassword for the secret reveal buttons (2ea2c11)
• ui: add search to the remaining paged admin list views (22ff78f)
• ui: reorganize the admin menu, split settings pages, and redesign the dashboard (4ec4118)
• ui: standardize admin list views with row actions and copyable ids (722244f)

Bug Fixes

• bump dependencies and refresh generated artifacts (4de7381)
• bump ee-client/sentry-node/bullmq and refresh generated artifacts (b365690)
• bump sentry-node/bullmq/nanoid/eslint and refresh generated artifacts (d9c26df)
• cap webhook delivery attempts with a wall-clock timeout (ca263d7)
• keep dashboard stats counters for the intended retention period (db175f7)
• mint a session sid on every admin login path (e166fbf)
• point documentation links to the learn.emailengine.app docs site (f947b27)
• sso: reject unverified OIDC emails in the admin allow-list (34ff519)
• sso: treat any present email_verified value as a strict boolean (89821cc)
• theme: align the SSO setup buttons on the account security page (aee2d34)
• theme: apply the post-merge release review findings (d36ce1b)
• theme: apply the whole-branch review findings (965e652)
• theme: cap tooltip width so long texts wrap (a805b3b)
• theme: gate TLS certificate provisioning on a usable service domain (ef22689)
• theme: indicate the selected tab in the admin UI tab strips (2aa6d22)
• theme: load the ACE language-tools extension where pages expect it (d3d1592)
• theme: render the API reference as a light island (ddf696c)
• theme: repair the ACE editor toolbar chrome (4f492f1)
• theme: tooltip stacking, empty-bubble gating and badge rounding (bdfea13)
• theme: use a real list for the gateway usage notes (b860c28)
• theme: use standard FlyonUI rounding on the auth pages (96b7028)
• ui: add a visible exit for the ACE editor fullscreen mode (0378d82)
• ui: admin UX round: search clear, secret copy, modal Cancel (ff6def0)
• ui: keep submitted values when a settings form fails validation (f01bdef)
• ui: left-align tooltip bubble text (cc52213)
• ui: link the dashboard Needs attention card to a real errors filter (50763c5)
• ui: make admin UI links visibly distinct from body text (e9a4827)
• ui: stop the row-actions kebab wrapper from trapping its open menu (d86324d)
• wire RPC channel into worker Account instances so OAuth re-auth reconnect does not crash (7372bf5)

---

This PR was generated with Release Please. See documentation.